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WHAT IS CLAIMED IS: 

1, A network monitoring method for an information system 
comprising: 

a first step of, in at least one first computer connected 
5 to a network and executing an application, executing at least 
one agent to collect an operation history in the first 
computer; 

a second step of, in at least one second computer 
connected to the network and monitoring the network, monitoring 
10 and recording the presence of the first computer in which the 
agent is not executed; and 

a third step of inspecting the record to check whether or 
not the agent is executed in all the first computers 
constituting the information system. 

15 

2 . A network monitoring method for an information system 
according to claim 1, wherein the second step includes: 

a step of monitoring a packet flowing in the network in 
the second computer; 
20 a step of extracting the address of a transmission source 

and/or a transmission destination from the monitored packet in 
the second computer; 

a step of transmitting a message to the agent of the 
first computer corresponding to the address in the second 
25 computer; and 

a step of checking a response to the transmitted message 
in the second computer to record the address of the first 
computer having no response. 
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3- A network monitoring method for an information system 
according to claim 1, wherein the second step includes: 

a step of communicating with a network device 
5 constituting the network in the second computer to obtain an 
address list of the first computer connected to the network 
device; 

a step of transmitting a message to the agent of the 
first computer corresponding to an address in the obtained 
10 address list in the second computer; 

a step of checking a response to the transmitted message 
in the second computer to record the address of the first 
computer having no response. 

15 4. An operational risk evaluation method for an information 
system comprising: 

a first step of, in at least one first computer connected 
to a network and executing an application, executing at least 
one agent to collect an operation history in the first 

20 computer; 

a second step of extracting an event in which a loss is 
generated from the collected operation history; 

a third step of determining an amount of loss in the 
extracted event; 

25 a fourth step of, in at least one second computer 

connected to the network and monitoring the network, monitoring 
and recording the presence of the first computer in which the 
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agent is not executed; and 

a fifth step of inspecting the record to check whether or 
not the agent is executed in all the first computers 
constituting the information system. 

5 

5. An operational risk evaluation method for an information 
system according to claim 4, wherein the fourth step includes: 

a step of monitoring a packet flowing in the network in 
the second computer; 
10 a step of extracting the address of a transmission source 

and/or a transmission destination from the monitored packet in 
the second computer; 

a step of transmitting a message to the agent of the 
first computer corresponding to the address in the second 
15 computer; and 

a step of checking a response to the transmitted message 
in the second computer to record the address of the first 
computer having no response. 

20 6. An operational risk evaluation method for an information 
system according to claim 4, wherein the fourth step includes: 

a step of communicating with a network device 
constituting the network in the second computer to obtain an 
address list of the first computer connected to the network 

25 device; 

a step of transmitting a message to the agent of the 
first computer corresponding to an address in the obtained 
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address list in the second computer; and 

a step of checking a response to the transmitted message 
in the second computer to record the address of the first 
computer having no response. 

5 

7 . A method for .performing a service business for certifying 
correctness of an operational risk of a customer business 
organization, comprising : 

a first step of, in at least one first computer connected 
10 to a network and held by the customer business organization for 
executing an application, executing at least one agent to 
collect an operation history in the first computer; 

a second step of, in at least one second computer 
connected to the network and provided under the management of a 
15 service trader, monitoring and recording the presence of the 
first computer in which the agent is not executed; and 

a third step of inspecting the record to check, in the 
service trader, whether or not the agent is executed in all the 
first computers constituting the information system. 

20 

8. A method for performing a service business for certifying 
the correctness of an operational risk of a customer business 
organization according to claim 7, wherein the second step 
includes : 

25 a step of monitoring a packet flowing in the network in 

the second computer; 

a step of extracting the address of a transmission source 
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and/or a transmission destination from the monitored packet in 
the second computer; 

a step of transmitting a message to the agent of the 
first computer corresponding to the address in the second 
5 computer; and 

a step of checking a response to the transmitted message 
in the second computer to record the address of the first 
computer having no response. 

10 9. A method of managing an insurance business for 

compensating a loss generated by an event corresponding to an 
operational risk of a customer business organization, 
comprising: 

a first step of, in at least one first computer connected 
15 to a network and held by the customer business organization for 
executing an application, executing at least one agent to 
collect an operation history in the first computer; 

a second step of extracting an event in which a loss is 
generated from the collected operation history; 
20 a third step of determining an amount of loss in the 

extracted event; 

a fourth step of, in at least one second computer 
connected to the network and provided under the management of 
an insurance company, monitoring and recording the presence of 
25 the first computer in which the agent is not executed; and 

a fifth step of inspecting the record to check, in the 
insurance company, whether or not the agent is executed in all 
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the first computers constituting the information system. 

10. A method of managing an insurance business for 
compensating a loss generated by an event corresponding to an 
5 operational risk of a customer business organization according 
to claim 9, wherein the fourth step includes: 

a step of monitoring a packet flowing in the network in 
the second computer; 

a step of extracting the address of a transmission source 
10 and/or a transmission destination from the monitored packet in 
the second computer; 

a step of transmitting a message to the agent of the 
first computer corresponding to the address in the second 
computer; and 

15 a step of checking a response to the transmitted message 

in the second computer to record the address of the first 
computer having no response. 



